As a user, I would like to set more than one permission in the same request in a more standard way.
CFR permissions management is working according to its documented API, nevertheless every permission is managed via the same queryParam, "permission". Having the same parameter several times on the request can feel strange to some API clients (e.g.: PDI's step "call endpoint" does not parse two permissions at the same time - it only keeps one of them, if you set both read and write... implying running the request twice).
It would be nice to have the permission parametrisation implemented in a way to cope with these situations.